Chinese Cybersecurity Centre Accuses US of Hacking and Stealing Technology Secrets

 

Phoebe Zhangin Shenzhen

A Chinese cybersecurity agency has accused the United States of orchestrating cyberattacks to steal business secrets from a research centre and a data company, amid a backdrop of heightened tensions between the two nations over cyber espionage. The National Computer Network Emergency Response Technical Team/Coordination Centre (CNCERT), a non-governmental body that monitors cybersecurity threats in China, made the allegations in a statement released on Wednesday. The statement, widely covered by state media, claims that American intelligence agencies have been behind the attacks.

According to CNCERT, since August, a research unit focused on advanced material design has been targeted by cyberattacks originating from the US. The attackers reportedly exploited vulnerabilities in an electronic document security system to infiltrate the company’s server. They then deployed a Trojan horse virus via a software update service, which spread to over 270 devices, taking control and stealing commercial secrets.

A separate attack in May 2023 involved an intrusion into the email server of a major high-tech enterprise specializing in smart energy and digital information. The attackers reportedly used a Microsoft Exchange software vulnerability to plant backdoor programs, steal email data, and gain control of over 30 devices to further extract business secrets.

In its weekly report, CNCERT stated that it had coordinated with various entities, including cloud service providers and international organizations, to handle a total of 146 network security incidents, with 92 being cross-border attacks. The report also highlighted 2,950 data security breaches and flagged vulnerabilities in several software programs, including Adobe Illustrator, Android, and IBM Cognos Controller.

This accusation comes amid ongoing tensions between the US and China over cybersecurity issues. The US government recently initiated a national security investigation into Chinese router company TP-Link, alleging its devices had been targeted in cyberattacks linked to China. Earlier this month, a US official reported that at least eight US telecoms companies and numerous countries had been affected by Chinese hacking operations.

In response, China has denied the accusations, with the Chinese embassy in Washington calling on the US to "stop its own cyberattacks against other countries." Beijing has also previously accused the CIA of using cyberweapons to target countries, including China, and claimed to have captured cyberattack tools associated with the US intelligence agency.

The ongoing cyber tensions highlight the complex and increasingly hostile relationship between the US and China, as both countries trade accusations of cyber espionage and espionage-related activities.